General

  • Target

    3eee6eb9e0d5ea984ae64caa890f74a7ae529d6c47e6c77e760451faea9bed0dN

  • Size

    176KB

  • Sample

    241113-rjl4wawqfj

  • MD5

    5ac16239442872a292d26dc5f8f437a0

  • SHA1

    1c2f1e08902c95428937abd4f5c572214840ed64

  • SHA256

    3eee6eb9e0d5ea984ae64caa890f74a7ae529d6c47e6c77e760451faea9bed0d

  • SHA512

    6bbaf5c8afaaa58eb651b30a1c61d773d5c5cd8d775a41ff20ce9aa8f0985e8535100701c05be9cebe8c23dfd5f6cc4d2768f8c1b1da6e6d981a4e7586661854

  • SSDEEP

    3072:OxqZWXragQx+/Z5reN5FchA/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cU:0qZWZ5gch

Malware Config

Extracted

Family

redline

Botnet

forma

C2

193.233.20.24:4123

Attributes
  • auth_value

    50b8e065d7cb1e9e30786f7a370368f9

Targets

    • Target

      3eee6eb9e0d5ea984ae64caa890f74a7ae529d6c47e6c77e760451faea9bed0dN

    • Size

      176KB

    • MD5

      5ac16239442872a292d26dc5f8f437a0

    • SHA1

      1c2f1e08902c95428937abd4f5c572214840ed64

    • SHA256

      3eee6eb9e0d5ea984ae64caa890f74a7ae529d6c47e6c77e760451faea9bed0d

    • SHA512

      6bbaf5c8afaaa58eb651b30a1c61d773d5c5cd8d775a41ff20ce9aa8f0985e8535100701c05be9cebe8c23dfd5f6cc4d2768f8c1b1da6e6d981a4e7586661854

    • SSDEEP

      3072:OxqZWXragQx+/Z5reN5FchA/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cU:0qZWZ5gch

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks